Paper/Archive/CVE-2021-22941

CVE-2021-22941

Citrix ShareFile — Citrix ShareFile Improper Access Control Vulnerability

KEV · due 15 Apr ransomware use EPSS 54%public exploit SSVC act CVSS 9.8

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 In CISA KEV+3030.0 EPSS percentile 99.0.990 × 2019.8 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.

Affected

ProductAffectedFixed inSource

Citrix ShareFile storage zones controller5.11.20–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refsupport.citrix.com/article/CTX328123 refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22941 kevcisa.gov/known-exploited-vulnerabilities-catalog